rte

package
v0.4.14-0.2023082101 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Aug 7, 2023 License: Apache-2.0 Imports: 11 Imported by: 0

Documentation

Index

Constants

View Source
const (
	MainContainerName   = "resource-topology-exporter"
	HelperContainerName = "shared-pool-container"
)

these should be provided by a deployer API

Variables

This section is empty.

Functions

func AddVolumeMountMemory

func AddVolumeMountMemory(podSpec *corev1.PodSpec, cnt *corev1.Container, mountName, dirName string, sizeMiB int64)

func ContainerConfig

func ContainerConfig(ds *appsv1.DaemonSet, name string) error

func DaemonSetArgs

func DaemonSetArgs(ds *appsv1.DaemonSet, conf nropv1.NodeGroupConfig) error

func DaemonSetHashAnnotation

func DaemonSetHashAnnotation(ds *appsv1.DaemonSet, cmHash string)

func DaemonSetPauseContainerSettings

func DaemonSetPauseContainerSettings(ds *appsv1.DaemonSet) error

func DaemonSetRunAsIDs

func DaemonSetRunAsIDs(ds *appsv1.DaemonSet) error

UpdateDaemonSetRunAsIDs bump the ds container privileges to 0/0. We need this in the operator-as-operand flow because the operator image itself is built to run with non-root user/group, and we should keep it like this. OTOH, the rte image needs to have access to the files using *both* DAC and MAC; the SCC/SELinux context take cares of the MAC (when needed, e.g. on OCP), while we take care of DAC here.

func DaemonSetUserImageSettings

func DaemonSetUserImageSettings(ds *appsv1.DaemonSet, userImageSpec, builtinImageSpec string, builtinPullPolicy corev1.PullPolicy) error

func FindContainerByName

func FindContainerByName(podSpec *corev1.PodSpec, containerName string) (*corev1.Container, error)

Types

This section is empty.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL